esf-hauteluce-valjoly.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:79:70:16:a9:17:4c:ee:73:79:25:67:6a:12:d3:2f:30:78 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=esf-hauteluce-valjoly.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:79:70:16:a9:17:4c:ee:73:79:25:67:6a:12:d3:2f:30:78Serial Number (int): 302660015388346372248271848789675367936120
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 60:24:d7:e4:e6:da:96:3d:14:86:94:73:8d:be:4c:68:59:72:2e:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 91:0d:3d:52:2e:f5:88:91:bf:dd:58:44:a7:cf:9e:6a:10:46:af:25
Fingerprint (sha256): da:87:8b:22:35:99:fb:92:dc:60:63:8e:a9:84:40:5a:b1:d7:be:7f:6d:b0:9b:aa:66:f1:6c:0a:8d:b9:4f:40
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate esf-hauteluce-valjoly.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for esf-hauteluce-valjoly.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
esf-hauteluce-valjoly.com
esf-lescontamines.net
ski-school-lescontamines.co.uk
www.esf-hauteluce-valjoly.com
www.esf-lescontamines.net
www.ski-school-lescontamines.co.uk
esf-lescontamines.net
ski-school-lescontamines.co.uk
www.esf-hauteluce-valjoly.com
www.esf-lescontamines.net
www.ski-school-lescontamines.co.uk
Other certificates including the domain name esf-hauteluce-valjoly.com
(limited to 100 certificates)
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
www.esf-lescontamines.net
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
www.esf-lescontamines.net
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
esf-hauteluce-valjoly.com
Certificate
The complete raw certificate details for esf-hauteluce-valjoly.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgISA3lwFqkXTO5zeSVnahLTLzB4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDcxODEwMjFaFw0y MDA1MDcxODEwMjFaMCQxIjAgBgNVBAMTGWVzZi1oYXV0ZWx1Y2UtdmFsam9seS5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cn0Sp79Gy4EjJodP TCKBol3jgfiV32RJFclRmmeQTp623Op0jLnXJ/fmXqZAmfYf4uwr8fnJor/KVWjy bgsk8VxPl8lnofRyO7LLCp+C2ObdPU4khAH6VMftoSk98GNy2kGoodupAwmFLop3 SlY6wa9tT/TnhomQDUIsSXlCvex/FO+iMSZlNyvOJatRjBTpVQq5B+mu7elM/z1J YsB56XiX9WG9qYLdS56WBFezyxIwdyjYelfLtMw/FpfL70FoKuL1LBtMHv5wAAPu jH6ojG2GGHqDQdvFfkgFQmEOPpD5SNXqmuymqEOoQM8s1UCZ3yqDoZ3uO66eq3EK ZPxlAgMBAAGjggMFMIIDATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGAk1+Tm2pY9 FIaUc42+TGhZci4eMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wgbsGA1UdEQSBszCBsIIZZXNmLWhhdXRlbHVjZS12YWxq b2x5LmNvbYIVZXNmLWxlc2NvbnRhbWluZXMubmV0gh5za2ktc2Nob29sLWxlc2Nv bnRhbWluZXMuY28udWuCHXd3dy5lc2YtaGF1dGVsdWNlLXZhbGpvbHkuY29tghl3 d3cuZXNmLWxlc2NvbnRhbWluZXMubmV0giJ3d3cuc2tpLXNjaG9vbC1sZXNjb250 YW1pbmVzLmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHUAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1 loFxRVgAAAFwIQ9kVgAABAMARjBEAiBCn6PvowDqIRXTVHGpZc1voMcKNCcccCp5 AOwpg4VJGAIgIlOBhUGwJJ9ImCNjny9RG5W7OYcnqQEzM5AaI5BXfF0AdgCyHgXM i6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXAhD2REAAAEAwBHMEUCIQCd yKppd1yiblxWGuEUqsM6nQmDLj4NpPV/46hz7ZDskgIgVKyHLGHxIDZrzuCxPr+g wUorCKnISKlNc3phvjpiepowDQYJKoZIhvcNAQELBQADggEBAJq+IGGJZoG5uVnc AwQ+puVvYxUOhDIMotpyur5N9M6z1OOAsczEnKdEeggPKMcoJBzxQgw/7Xfdryvb +7M3x2fag/Oq0zq696/aj5CuF1fGav0c1tl0H14so3FEdKnglqBgDclxYM+FpRdi E6BZ8TOm+W1tWApEuosAJQlJPeHBks+LkUos9Lx046wOWuYecK4WjWo8X7FShvOR frFUQTNepx/tpb0DbJyEVxuiH1Q2LL4ZpCZLkxjvmSOyTrijUWqbR0Numy+GP7xA t/nF8O6+cEzUgnqu46XDkVKi57+Jd+EOGKT8Z5G4QEZaCzwMvA0/ckxAS4r7waBy reb2hLM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHJ9Eqe/RsuBIyaHT0wi gaJd44H4ld9kSRXJUZpnkE6ettzqdIy51yf35l6mQJn2H+LsK/H5yaK/ylVo8m4L JPFcT5fJZ6H0cjuyywqfgtjm3T1OJIQB+lTH7aEpPfBjctpBqKHbqQMJhS6Kd0pW OsGvbU/054aJkA1CLEl5Qr3sfxTvojEmZTcrziWrUYwU6VUKuQfpru3pTP89SWLA eel4l/VhvamC3UuelgRXs8sSMHco2HpXy7TMPxaXy+9BaCri9SwbTB7+cAAD7ox+ qIxthhh6g0HbxX5IBUJhDj6Q+UjV6prspqhDqEDPLNVAmd8qg6Gd7juunqtxCmT8 ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302660015388346372248271848789675367936120 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 18:10:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 18:10:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esf-hauteluce-valjoly.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22779351309898592805210907312708325409778537301364179463433361313858610547292506769700508574541083860430488280291424073901585838185101603816613719094442215590058465294109782755910999210063671871723556945564320858845117777136262518381191441734013093648879108193960150224033181149099551460051854341492286006649516053735935579005438702212723245556424353717839942591250727157253680921065701404392492362009043722622342095798435857248608647979311824539350244348746200987429963293344005699723897477405724085878648443346767875493669983050251013131456289646701499948497090571074727932420040757266952410060332986088794299366501 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6024d7e4e6da963d148694738dbe4c6859722e1e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esf-hauteluce-valjoly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esf-lescontamines.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ski-school-lescontamines.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esf-hauteluce-valjoly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esf-lescontamines.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ski-school-lescontamines.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170210f645600000403004630440220429fa3efa300ea2115d35471a965cd6fa0c70a34271c702a7900ec298385491802202253818541b0249f489823639f2f511b95bb398727a9013333901a2390577c5d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170210f644400000403004730450221009dc8aa69775ca26e5c561ae114aac33a9d09832e3e0da4f57fe3a873ed90ec92022054ac872c61f120366bcee0b13ebfa0c14a2b08a9c848a94d737a61be3a627a9a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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